Privacy Policy

Who we are

rumpelstiltskinai.app turns a photo of you or your own pet into an AI-made fairy-tale still and a short tip-toe dance video. This policy explains what we collect, why, who we share it with and how long we keep it. For privacy questions or requests, email support@rumpelstiltskinai.app.

What we collect

Your photo. The photo you upload, and whether you chose "yourself" or "your pet". We need it to make your still and video.
What we make from it. The fairy-tale still and any videos made from it.
Your account. When you sign in with Google, we receive your name, email address, profile picture and Google account ID. We use them to run your account and keep you signed in. We never see your Google password or any other Google data.
Purchases and credits. From Waffo, our payment provider, we receive an order ID, the product, the amount and the payment status, so we can add credits to your account or take them back after a refund. We keep a record of the credits you buy, spend and get back. You enter your card details on Waffo's checkout, never on our site.
Messages. If you contact us, your name, email address and message.
Technical data. Like any website, our hosting provider processes your IP address, browser type and the pages you request, to deliver the site and protect it from abuse.
Optional analytics. If you allow analytics cookies, Google Analytics 4 measures page visits, referring websites, approximate location and browser/device information. We send page types rather than video IDs, and remove URL query strings. We do not send your name, email, uploaded photos, generated media or payment details to Analytics.

How we use it

We use this data to make your stills and videos, run your account, add and track credits, handle refunds, answer support requests, email you about your account or your videos (for example, that a video is ready), prevent fraud and abuse, and meet legal obligations. We don't send marketing emails, we don't sell your data, and we don't use your photos or videos in advertising.

If you are in the EEA or the UK, we rely on these legal bases: performing our contract with you (making your videos, running your account and credits), our legitimate interests (keeping the service secure and preventing abuse), and legal obligations (tax and accounting records).

Your photo and your face

We use your photo only as the input image for the AI models that make your still and video.
We don't create face templates, extract face geometry or store any other biometric identifiers, and we don't use your photo for face recognition.
We don't use your photos or videos to train AI models, and we don't put them in our marketing.
Your finished video has its own hard-to-guess link. If you share that link, anyone who has it can watch the video. They can't see your original photo or your still.

Only upload a photo of yourself or of a pet that belongs to you. Photos of other people and of anyone under 18 aren't allowed; see our Terms of Service.

These service providers process data for us, only so they can provide their service:

Provider	What they do for us	What they receive
Cloudflare	Hosting, database, file storage and security	Everything stored on the site, including your photo, stills and videos
fal.ai	Runs the AI models that make your still and video: Google's Nano Banana and Kuaishou's Kling (full list)	Your photo and your still
Google	Sign-in	The data needed to sign you in
Google Analytics 4	Optional website usage analysis, after you consent	Page types, referring websites and technical usage information; no account or media identifiers
Resend	Sending email	Your email address and the email we send

Payments are handled by Waffo (Waffo.com Limited), which sells you the credits as merchant of record. Waffo processes your payment, billing details and taxes under its own privacy policy, and tells us only the order details listed above.

These providers may process data in countries other than yours, including the United States. We may also disclose data if the law requires it, or to protect our users or the service from fraud or abuse.

How long we keep it

Photos, stills and videos: 30 days. We delete your uploaded photo, the still made from it and its video 30 days after your last take with that photo (a still, a video or a redo). Download the videos you want to keep. The copies we send to fal.ai for processing are set to expire there within 7 days. If you want something deleted sooner, email us.
Your account: until you ask us to delete it. We delete it within 30 days of your request.
Purchase and credit records: as long as we need them for accounting, tax and payment disputes, including after your account is deleted.
Support emails: as long as we need them to handle your request.
Server logs: a few days, for security and debugging.

Cookies and browser storage

We don't use advertising cookies. Optional analytics cookies are used only after you allow them.

Sign-in cookies. When you sign in, we set cookies that keep you signed in and protect sign-in from forged requests. The site can't work without them.
Language preference. A cookie may remember the site language.
Browser storage. While you sign in, your browser may hold the photo you picked so you don't have to choose it again. It stays on your device until you upload it.
Analytics cookies. If you choose “Allow analytics,” Google Analytics 4 uses first-party _ga cookies to distinguish visits and help us improve the site. Analytics does not load before you consent or when you reject it. Advertising personalization and Google signals are disabled. You can change or withdraw your choice using Privacy choices at the bottom of any page; withdrawal stops future collection and removes the Analytics cookies on this site. Your choice is saved in browser storage. Google describes its processing in How Google uses information from sites that use its services.

Your data rights

You have these rights wherever you live. Some laws, including those of the EEA, the UK and California, also guarantee them.

See your data. Sign in and open My videos to see every still and video we hold for you and how many videos and free stills you have left. Your name and email address are in the account menu. For a full copy of what we hold about you, including your uploaded photos and your credit history, email us.
Get a copy. We send your account and credit data as a machine-readable file (JSON), and your photos, stills and videos as the original files.
Correct it. If your name, email address or anything else we hold is wrong, email us and we will fix it.
Delete files sooner. We delete photos, stills and videos automatically after 30 days. To delete one sooner, email us its link.
Delete your account. Email us from the address on your account and ask us to delete it. We delete your account, your sign-in data and all your photos, stills and videos, and confirm by email. Unused credits are lost when your account is deleted, so use them first, or ask for a refund if you still can under our Refund Policy. We keep purchase and credit records only as described in "How long we keep it".
Object or restrict. You can ask us to stop or limit a particular use of your data.

How to ask. Email support@rumpelstiltskinai.app from the address on your account, so we know the request comes from you. We confirm we have it within 3 business days and complete it within 30 days. If a request is complex and the law allows more time, we will tell you why and when to expect it. These requests are free.

You can also complain to your local data protection authority.

We don't sell your personal information or share it for cross-context behavioral advertising.